Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
File: hg2fAamLUU69PCcj1_frRIMm9eI.mft (raw, json)
Hash identifier: eCmrorylWFrar4VxOuRYkvGI3JgkyuXHT9WcaZfLuMY=
Subject key identifier: 4A:1C:CF:7A:C7:89:9F:6D:31:33:3E:7D:A8:97:27:6F:AB:B4:26:49
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Certificate issuer: /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial: 019F8F7FB08A1FB880269005C0A9EBDD0BCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
Manifest number: 19CF
Signing time: Thu 23 Jul 2026 15:02:17 +0000
Manifest this update: Thu 23 Jul 2026 15:02:17 +0000
Manifest next update: Fri 24 Jul 2026 15:02:17 +0000
Files and hashes: 1: h_hShADtBIzeK-Szx9l4bfm8jag.roa (hash: hsH1pDZZoflDWpuxdoPCV7EaJcM0R+/7hC4hgh317+4=)
2: hg2fAamLUU69PCcj1_frRIMm9eI.crl (hash: EldmfRDDY8urRDUlMkrtyqg1U3ADpDLGJX3KD1oxHMY=)
3: rPAahRiAFhKEWjnyhz4z-0lkvXU.roa (hash: zzqyB+t4YAf4zoHDwM87ojkF2fRZqc5eAp62HCRrYX0=)
4: yhSXUlVamR-zZ5m_SN46dT0IkMI.roa (hash: MIQXE7BooxPG7h5Z2Qw2PG5T0/LuMdp6jCasMFaOQ7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:b0:8a:1f:b8:80:26:90:05:c0:a9:eb:dd:0b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Validity
Not Before: Jul 23 15:02:17 2026 GMT
Not After : Jul 24 15:02:17 2026 GMT
Subject: CN=4a1ccf7ac7899f6d31333e7da897276fabb42649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:8e:36:36:49:92:a3:8b:61:b6:41:b6:53:
b8:b8:bd:87:8d:d2:b0:0a:13:7d:b6:28:cf:c9:55:
98:0e:ff:57:76:e3:ae:ba:4f:62:76:f6:a2:7e:aa:
0d:ef:cc:2b:d2:e8:3c:8d:b2:6b:cd:1c:c3:d4:98:
f6:6f:53:10:91:7e:68:d4:66:c2:96:fa:f3:d6:c5:
38:f7:87:e6:4d:c3:39:4e:16:91:33:a0:f5:c9:7e:
aa:9e:75:a4:30:fc:9a:23:7b:36:92:48:fa:8d:aa:
69:de:bf:15:4b:5a:7f:6e:ec:93:fa:16:aa:e9:be:
c2:79:47:9b:08:2a:f3:88:2d:f4:69:2d:26:c7:24:
99:8d:b2:84:4e:f2:77:2e:90:d1:00:c2:45:fd:24:
2e:b3:7d:08:20:ff:01:67:ac:ab:02:0e:2e:eb:8b:
49:ce:38:8d:1b:92:20:74:56:13:97:75:62:66:2e:
aa:f5:7f:cd:ef:f7:0c:b9:92:8e:bb:ff:05:8e:47:
b8:4f:19:f8:cf:60:23:0b:c3:fb:2b:68:5a:36:e2:
44:40:ed:fa:2c:00:82:ad:64:fc:80:70:8b:3a:52:
a4:4b:01:34:f2:ff:10:39:5a:16:61:4d:5d:4b:a5:
7f:09:f4:c4:04:47:da:59:3f:7e:98:7f:4e:8c:02:
c5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1C:CF:7A:C7:89:9F:6D:31:33:3E:7D:A8:97:27:6F:AB:B4:26:49
X509v3 Authority Key Identifier:
keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:8d:0a:21:69:fe:f6:14:02:62:22:df:f6:d1:94:a6:2b:67:
cf:46:49:52:60:73:8c:30:9e:05:88:60:b4:7c:38:c3:6f:f2:
cb:b4:a8:bb:3a:4b:09:bd:6e:ae:ae:ee:42:21:a3:2a:9a:ea:
b6:5f:97:19:dc:7a:4a:00:31:9e:f4:58:34:0c:0a:9e:54:ee:
e8:15:23:5b:22:9d:ce:05:c4:db:21:51:ac:f8:f2:cb:5f:d9:
5a:d1:e0:1d:83:3b:c4:33:21:4c:e0:a3:53:9c:76:dd:01:d5:
b8:fd:a3:22:0b:bc:5e:b3:ec:0f:db:f3:75:bd:9a:75:1a:d9:
36:b8:d7:2e:f7:01:ca:c8:6b:84:6e:e4:f8:30:96:83:4f:13:
a6:4c:b8:b9:44:8b:82:bd:1f:3c:a0:69:89:39:cb:9d:26:31:
68:b5:c4:36:58:c1:d4:cf:48:09:27:56:10:a9:cf:96:70:f2:
cd:c3:90:9c:1d:0a:54:0c:69:6b:06:0e:60:47:1d:d9:bd:e7:
d4:f0:05:37:c8:e3:f5:cb:17:0a:23:61:27:08:72:b4:53:56:
06:51:3c:39:22:fe:2f:8e:d6:c6:b1:8f:0c:e7:22:c5:14:63:
f9:52:b4:25:0d:12:d2:5d:7d:4b:cd:e7:1f:a0:cf:2e:f3:af:
cb:98:6c:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pf7CKH7iAJpAFwKnr3QvMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MGQ5ZjAxYTk4YjUxNGViZDNjMjcyM2Q3ZjdlYjQ0ODMy
NmY1ZTIwHhcNMjYwNzIzMTUwMjE3WhcNMjYwNzI0MTUwMjE3WjAzMTEwLwYDVQQD
Eyg0YTFjY2Y3YWM3ODk5ZjZkMzEzMzNlN2RhODk3Mjc2ZmFiYjQyNjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQuONjZJkqOLYbZBtlO4uL2HjdKw
ChN9tijPyVWYDv9XduOuuk9idvaifqoN78wr0ug8jbJrzRzD1Jj2b1MQkX5o1GbC
lvrz1sU494fmTcM5ThaRM6D1yX6qnnWkMPyaI3s2kkj6japp3r8VS1p/buyT+haq
6b7CeUebCCrziC30aS0mxySZjbKETvJ3LpDRAMJF/SQus30IIP8BZ6yrAg4u64tJ
zjiNG5IgdFYTl3ViZi6q9X/N7/cMuZKOu/8Fjke4Txn4z2AjC8P7K2haNuJEQO36
LACCrWT8gHCLOlKkSwE08v8QOVoWYU1dS6V/CfTEBEfaWT9+mH9OjALFPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEocz3rHiZ9tMTM+faiXJ2+rtCZJMB8GA1UdIwQY
MBaAFIYNnwGpi1FOvTwnI9f360SDJvXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGcyZkFhbUxVVTY5UENjajFfZnJSSU1tOWVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yM2JlYTYtOTAwMS00NDFkLTgzNjQt
NjFjYjQzYzJkYjg1LzEvaGcyZkFhbUxVVTY5UENjajFfZnJSSU1tOWVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8yM2JlYTYtOTAwMS00NDFkLTgzNjQtNjFjYjQzYzJkYjg1
LzEvaGcyZkFhbUxVVTY5UENjajFfZnJSSU1tOWVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVI0KIWn+
9hQCYiLf9tGUpitnz0ZJUmBzjDCeBYhgtHw4w2/yy7SouzpLCb1urq7uQiGjKprq
tl+XGdx6SgAxnvRYNAwKnlTu6BUjWyKdzgXE2yFRrPjyy1/ZWtHgHYM7xDMhTOCj
U5x23QHVuP2jIgu8XrPsD9vzdb2adRrZNrjXLvcByshrhG7k+DCWg08Tpky4uUSL
gr0fPKBpiTnLnSYxaLXENljB1M9ICSdWEKnPlnDyzcOQnB0KVAxpawYOYEcd2b3n
1PAFN8jj9csXCiNhJwhytFNWBlE8OSL+L47WxrGPDOcixRRj+VK0JQ0S0l19S83n
H6DPLvOvy5hssw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:27:02 2026 by rpki-client